feat: WIP Contnet managemtn

apps/edr-freight-api/src/modules/support-content/public-support-content.controller.ts

@@ -0,0 +1,29 @@
+import { Public } from "@edr/api-common";
+import { Controller, Get, Header } from "@nestjs/common";
+import { ApiOperation, ApiTags } from "@nestjs/swagger";
+
+import { SupportContentService } from "./support-content.service";
+
+/**
+ * The portal's /help, /faq, /terms and /privacy routes are deliberately outside
+ * its auth guard — the sign-up screen links to them before a session exists —
+ * so this read must work with no token. `@Public()` is class-level because that
+ * is the idiom the other genuinely-anonymous controllers here use; without it
+ * the globally registered `JwtGuard` would 401 every anonymous visitor.
+ */
+@ApiTags("support-content")
+@Public()
+@Controller("support-content")
+export class PublicSupportContentController {
+  constructor(private readonly service: SupportContentService) {}
+
+  @Get()
+  // Hit on every anonymous page view, and the copy changes a few times a year.
+  @Header("Cache-Control", "public, max-age=300")
+  @ApiOperation({
+    summary: "Public help, FAQ, legal and support-contact copy for the portal",
+  })
+  getBundle() {
+    return this.service.getBundle();
+  }
+}